Issue with upgrading to 2.3.6

[Chad La Joie]

Well, you could just turn of SSL, since that's what you're effectively doing.

Alternatively you could refer to the documentation which says how to
set properties on the underlying LDAP library:
https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverLDAPDataConnector

On Wed, Mar 7, 2012 at 11:40, Martin Haase <martin.haase at daasi.de> wrote:
> Hi Daniel,
>
> comment! :-)
>
> As for login.config, it seems to have digested the addition (well, cannot
> say whether honored yet):
>
> edu.vt.middleware.ldap.jaas.LdapLoginModule sufficient
> 	host="my.host.domain"
> 	java.naming.ldap.factory.socket="javax.net.ssl.SSLSocketFactory"
> 	[...]
>
> However, attribute-resolver.xml does not like that attribute in
> <resolver:DataConnector[@type="LDAPDirectory"] />....
> How would I go for setting the property you describe for the attribute
> resolver?
>
> You understand, I am in the process of updating for a bunch of customers to
> 2.3.6, and if it
> turns out that their LDAP cert was not correct I'll definitely need a quick
> possibility to revert
> back to the old behaviour, ideally using solely config and not compiling
> anything...
>
> Regards,
> Martin
>
>
>
> Am 29.02.2012 18:24, schrieb Daniel Fisher:
>
> On Wed, Feb 29, 2012 at 11:51 AM, Chad La Joie <lajoie at shibboleth.net>
> wrote:
>>
>> That said, there is a way to revert back to the old behavior and I've
>> asked Daniel to go ahead and document it on the vtldap site as it's
>> something you configure with that library.
>
>
> Here it is:
> http://code.google.com/p/vt-middleware/wiki/vtldapTLS#Hostname_Validation
> Please comment if more explanation is needed.
>
> --Daniel Fisher
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
>
> --
> -----------------------------------------------------------------------
> Dr. Martin Haase
> DAASI International GmbH                   phone:     +49 7071 407109-6
> Europaplatz 3                              Fax  :     +49 7071 407109-9
> D-72072 Tübingen                           email: Martin.Haase at DAASI.de
> Germany                                    Web  :   http://www.daasi.de
>
> Directory Applications for Advanced Security and Information Management
> -----------------------------------------------------------------------
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net



-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered